Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/ISt9qz0bnk_Usdok4NsLAZp7cmc.roa
File: ISt9qz0bnk_Usdok4NsLAZp7cmc.roa (raw, json)
Hash identifier: CeYKWNNYNPq3OP0fO+cAaq6qbi5K7B05zABSzElNvnw=
Subject key identifier: 21:2B:7D:AB:3D:1B:9E:4F:D4:B1:DA:24:E0:DB:0B:01:9A:7B:72:67
Certificate issuer: /CN=adf44975a5dbdbf823b4a0a6b7eeb99b1484367e
Certificate serial: 019424B3D56B5959B0A3C8AB285E9662E087
Authority key identifier: AD:F4:49:75:A5:DB:DB:F8:23:B4:A0:A6:B7:EE:B9:9B:14:84:36:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfRJdaXb2_gjtKCmt-65mxSENn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/ISt9qz0bnk_Usdok4NsLAZp7cmc.roa
Signing time: Thu 02 Jan 2025 01:49:12 +0000
ROA not before: Thu 02 Jan 2025 01:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25184
IP address blocks: 80.244.7.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 03 Jan 2025 11:39:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:d5:6b:59:59:b0:a3:c8:ab:28:5e:96:62:e0:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf44975a5dbdbf823b4a0a6b7eeb99b1484367e
Validity
Not Before: Jan 2 01:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=212b7dab3d1b9e4fd4b1da24e0db0b019a7b7267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:03:3b:a1:ef:3d:f4:6c:ef:13:cb:80:4b:da:
7b:69:1d:48:ec:46:48:c2:f4:63:9c:1c:cd:0f:8f:
b3:3c:09:0d:8a:16:a4:33:59:24:66:df:d0:59:e2:
52:f2:54:f1:2e:34:11:d2:44:f3:4e:06:f6:ed:30:
7e:0d:e2:f8:9a:b5:7a:2d:27:ef:c3:38:af:1e:77:
55:ef:02:43:5d:fd:79:5c:04:9b:17:4a:5b:2b:98:
38:22:ed:27:16:d6:e8:5d:d3:5f:84:91:23:08:a5:
21:3c:46:33:e7:3b:f1:31:12:22:2b:7a:5e:e8:c4:
20:e4:f5:e6:f7:93:c2:51:23:6d:00:cc:54:07:78:
11:19:53:dd:b9:c5:24:3d:5e:95:0c:e9:42:ba:de:
b2:cf:ef:a4:b0:1e:7e:1a:7a:cd:16:33:5f:e6:ca:
9c:65:8d:45:1b:48:ce:d1:2b:67:54:98:dc:5a:57:
88:e0:88:ae:e8:2c:df:62:cd:ea:31:94:55:11:80:
26:0d:af:23:07:12:4f:9a:cd:75:34:de:fb:cd:ef:
89:ae:3b:90:03:bf:89:21:cc:6e:a0:fa:f1:cf:eb:
ce:96:94:e8:2f:28:fa:8f:0b:14:11:4c:22:73:04:
04:6a:1c:58:3b:f3:90:84:d1:68:5b:37:ad:fc:29:
0b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:2B:7D:AB:3D:1B:9E:4F:D4:B1:DA:24:E0:DB:0B:01:9A:7B:72:67
X509v3 Authority Key Identifier:
keyid:AD:F4:49:75:A5:DB:DB:F8:23:B4:A0:A6:B7:EE:B9:9B:14:84:36:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfRJdaXb2_gjtKCmt-65mxSENn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/ISt9qz0bnk_Usdok4NsLAZp7cmc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.244.7.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:03:55:ee:af:e1:5d:0f:f6:49:5a:9b:71:77:70:eb:73:a2:
9a:a8:0c:ab:3c:54:77:02:11:91:52:65:df:6d:6b:76:ed:82:
3c:8e:3a:2f:88:ac:42:f1:1c:13:38:3f:a9:bb:0a:2a:eb:45:
23:7d:72:4f:eb:f0:f5:a0:ab:af:14:33:8d:d7:81:82:c1:0d:
0d:2c:ff:1a:72:13:29:42:64:bb:66:ca:54:38:27:87:86:f6:
98:ba:86:f3:46:14:4c:c9:67:ed:b3:d7:13:8e:de:3e:ea:e5:
43:79:2d:ff:74:c2:e7:a6:66:04:4a:97:d9:e2:06:50:9d:57:
bd:11:c3:ca:21:ae:c4:b8:5b:4f:ce:19:3b:f1:90:3d:1a:a0:
d3:51:44:c6:13:8b:8d:f7:46:6b:1e:28:9f:1b:46:47:e3:bb:
6e:26:0f:ee:61:d3:3f:d0:dd:d1:ca:f1:09:db:eb:06:6a:1f:
b3:6c:c3:65:ca:ff:48:90:6e:37:12:54:96:94:18:54:fe:da:
24:2d:d5:d1:6c:ce:32:64:b5:e1:7f:2c:54:a7:bf:54:67:f8:
0b:3f:a4:20:6b:d1:02:ee:7b:d7:a3:c6:29:ae:e2:9e:21:d1:
c0:17:9e:73:80:91:81:8c:58:a6:f2:f8:a4:af:d9:40:02:17:
52:a7:e7:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 14:13:24 2025 by rpki-client